Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
File: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json)
Hash identifier: UG7Gq07ziVrBVJKAhLkYt9kpO4KJpUVFiseiNjm2eUs=
Subject key identifier: A6:5F:B8:7D:00:20:D1:1B:19:FA:21:E8:91:7F:9F:42:75:30:B8:94
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 019CF685620F884348F3CB92405CB496A48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
Manifest number: 08C2
Signing time: Mon 16 Mar 2026 12:01:02 +0000
Manifest this update: Mon 16 Mar 2026 12:01:02 +0000
Manifest next update: Tue 17 Mar 2026 12:01:02 +0000
Files and hashes: 1: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: Fmz/EXlcJTb+iHnDmUlifbQ+Ori6t8bnOPhTU9bJ6rM=)
2: VEvXqpjtpnWqPhFsK1VjLPWcZ84.roa (hash: Ivq9B7fCTNtjnlU9FptxC9e2xrpHUztFCNXJ+qaH7LQ=)
3: Y2rIYreLOiywxBX2z6aRfWF7q04.roa (hash: dpqG15krdpxJUlUEVSBqVv3+kw/A6MahmXEVhi6w3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:85:62:0f:88:43:48:f3:cb:92:40:5c:b4:96:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Mar 16 12:01:02 2026 GMT
Not After : Mar 17 12:01:02 2026 GMT
Subject: CN=a65fb87d0020d11b19fa21e8917f9f427530b894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:b4:51:8b:e6:5a:5e:4d:de:ad:19:5c:d7:
e4:f9:dd:0a:8d:9b:02:bc:e7:7a:09:25:6e:8a:21:
db:1d:09:d3:f5:13:6e:a2:6c:ad:cb:08:b5:5a:fd:
e9:0a:c1:ac:69:59:5c:f0:69:d1:38:08:e6:ed:2b:
fc:ac:df:03:9a:8e:40:e9:d2:61:c8:99:1d:99:49:
53:52:f7:cb:31:cb:4c:cc:9e:cb:c9:5a:cd:1c:89:
a2:14:fa:8a:5c:5e:76:53:b7:37:b1:b8:a8:1f:82:
6c:85:78:c5:35:8d:65:b8:a8:7b:2c:66:0e:70:47:
59:6d:7b:a6:fc:01:83:3c:39:6c:f0:bb:ec:d4:7a:
cb:98:ae:96:85:de:5c:47:36:88:52:a3:92:a3:1b:
23:b7:33:a0:a8:da:8c:01:8f:32:62:a5:32:86:09:
8d:bb:b5:0c:46:0e:11:85:b6:3c:ec:41:b0:30:46:
07:6c:36:be:22:f4:66:ae:1e:b7:e3:e2:3a:c6:8b:
9c:b1:10:48:9b:cc:35:9d:02:c8:2f:f2:bb:32:a1:
29:0d:e3:34:29:46:9f:ea:62:dd:a3:8f:aa:37:3d:
c6:e7:8e:95:e6:01:f0:82:f4:c9:56:e3:99:59:13:
a4:f2:0b:5a:1e:a1:1c:5a:17:43:0f:67:a6:5b:8c:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:B8:7D:00:20:D1:1B:19:FA:21:E8:91:7F:9F:42:75:30:B8:94
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:18:ac:61:17:1a:42:2c:f5:14:99:cd:1f:88:81:34:e3:
08:be:92:a2:dd:fd:7c:41:28:88:59:88:d8:33:9f:97:0b:0f:
72:76:35:4d:43:92:f8:5a:41:28:ed:13:95:0d:b0:96:c4:0f:
9e:b9:8c:54:c2:73:7a:5d:f4:02:ec:85:0a:4f:35:f8:53:4a:
7d:b2:e1:4a:23:c4:cd:a4:dd:31:76:73:32:7d:9c:82:05:04:
21:9a:1e:47:84:c1:f6:09:ed:65:69:d3:8a:9c:3b:c6:2d:cc:
05:9f:44:e6:6c:78:83:64:17:ac:97:91:f3:01:15:29:50:d2:
fd:57:0c:86:71:39:43:57:73:e5:47:b5:d5:79:ed:9b:0d:01:
3f:14:32:b8:6c:7b:21:7e:c2:c5:b3:2a:ef:27:52:ec:68:fa:
15:bd:18:b2:92:c9:58:50:cd:2c:25:87:47:87:09:70:95:36:
0b:2b:d7:64:5b:3f:d7:9e:c1:cc:c2:fc:cd:8e:d2:67:81:12:
fa:bc:b7:b6:24:e0:1a:9a:88:45:f3:bc:38:4d:35:7e:8f:f5:
26:69:4f:02:76:2d:a5:d4:31:07:21:83:4a:bf:9b:14:6a:54:
8c:42:d9:5c:b0:5c:5f:b6:8a:ff:67:9a:86:ad:a3:38:64:4a:
32:4e:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:18:31 2026 by rpki-client